Newcastle Upon Tyne, Tyne and Wear, North East, United Kingdom Hybrid / WFH Options
DWP Digital
/Sentinel. Debugging and troubleshooting Microsoft 365 workloads and custom solutions. Using the following languages: PowerShell/CLI, KustoQueryLanguage (KQL), YAML and in infrastructure as code language such as Bicep/ARM. You and your role We're looking for a Senior Infrastructure Engineer More ❯
newcastle-upon-tyne, tyne and wear, north east england, United Kingdom Hybrid / WFH Options
Dynamic Search Solutions
Microsoft Sentinel. Experience in building and maintaining workflows with Azure Logic Apps to automate processes. Strong experience in API development and integration. Proficiency in KQL, JSON, and PowerShell. Good written and verbal communication skills. Technical understanding of IT infrastructure – Microsoft 365 suite, Defender XDR, Entra ID (Azure Active Directory), Azure More ❯
newcastle-upon-tyne, tyne and wear, north east england, United Kingdom Hybrid / WFH Options
KPMG UK
exploits, malware, ransomware, etc. their creation and activation and detection methods. • Knowledge of web application architecture and system administration. • Experienced building complex custom RQL, KQL or SQL queries. • Experienced with Microsoft Azure, AWS or GCP installation, configuration, and administration of security features and services. • Programming experience with Python or PowerShell More ❯
newcastle-upon-tyne, tyne and wear, north east england, United Kingdom Hybrid / WFH Options
Net Talent
alerts, and system logs for signs of suspicious activity or security breaches. Requirements Proven experience with Microsoft Sentinel, Defender for Endpoint, Defender for Identity KQL experience In depth understanding of PCAP analysis using Wireshark or equivalent. Network engineering/network admin OT operations/security (optional, but a bonus) What More ❯
newcastle-upon-tyne, tyne and wear, north east england, United Kingdom Hybrid / WFH Options
Cloud Decisions
complex Microsoft Sentinel at SMC and enterprise Understanding of security telemetry across identity, endpoint, cloud, and network layers Experience in SIEM content development, including KQL, analytics rules, and custom data connectors Scripting and engineering skills – Python, PowerShell, APIs, Function Apps A background in cyber threat detection, incident response or DFIR … is a real plus Comfortable working in very fast-moving, customer facing delivery environments The Technical Shizzle: Microsoft Sentinel (KQL, Analytics Rules, Workbooks, Watchlists) Azure Function Apps, Logic Apps, ARM templates PowerShell, Python, REST APIs Log ingestion and parsing across multi platforms (Azure/AWS/GCP, M365, Defender, Entra More ❯
